This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft File: bn8ivutSxuUaJCKxORQu6gP7XU0.mft (raw, json) Hash identifier: g/TRVimEZ0Two/9IzR22V6S+h/N/gx3mfjMRiFyihIw= Subject key identifier: 72:C9:70:BB:96:D6:89:24:65:7F:5C:F8:A3:29:0F:D7:8B:91:F5:11 Authority key identifier: 6E:7F:22:BE:EB:52:C6:E5:1A:24:22:B1:39:14:2E:EA:03:FB:5D:4D Certificate issuer: /CN=6e7f22beeb52c6e51a2422b139142eea03fb5d4d Certificate serial: 019AF1D259360B1569E5FEEBB143DEC835FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 04:01:25 +0000 Manifest this update: Sat 06 Dec 2025 04:01:25 +0000 Manifest next update: Sun 07 Dec 2025 04:01:25 +0000 Files and hashes: 1: bn8ivutSxuUaJCKxORQu6gP7XU0.crl (hash: lBa7La42vw9fhTTCorbEC40xo4V94IjH1G7lPcpwerI=) 2: z4IVFfra9dO93PZl7xdhmVhqzoE.roa (hash: 90ivV2dV0BSclFTId5ah7Fo9mKfLvO9taEvtncU7b/w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:59:36:0b:15:69:e5:fe:eb:b1:43:de:c8:35:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e7f22beeb52c6e51a2422b139142eea03fb5d4d Validity Not Before: Dec 6 04:01:25 2025 GMT Not After : Dec 7 04:01:25 2025 GMT Subject: CN=72c970bb96d68924657f5cf8a3290fd78b91f511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9c:50:fd:e6:e6:f8:d5:b5:38:46:3b:4c:a4: d6:f8:54:2a:70:fd:7a:42:04:9b:4d:90:bc:25:4a: fd:ed:6f:98:9f:8e:99:16:af:8c:03:8f:46:9c:2b: 57:2f:2c:8f:d5:6d:46:92:af:ff:bb:7a:3f:98:85: 86:f2:7f:cb:e6:ca:01:6b:f8:a1:5d:06:d7:dc:c0: b4:88:a1:27:d4:26:d5:d9:11:46:0d:e8:86:7e:47: a8:01:95:a4:4e:7d:ea:c3:73:3e:e3:b7:2a:46:3d: 09:fd:99:4c:11:fe:f2:73:53:02:61:5b:2e:f0:96: 14:50:fe:e9:37:e2:bf:4f:af:d8:5a:d3:ac:2b:2d: b2:fd:6f:d5:46:e3:eb:96:13:fa:b2:08:70:e9:d7: c2:f9:81:75:a0:13:5d:8d:85:35:76:e1:31:3f:b2: f8:f9:ed:01:89:27:13:78:7d:54:d0:7b:53:d5:96: 49:01:25:47:a5:cd:03:4f:60:4d:10:14:be:53:77: 94:e2:ee:6c:85:f1:83:71:c4:50:f3:c7:b1:7e:c9: 23:8e:84:e2:8f:25:1e:1d:52:cb:1b:df:a5:88:ab: a3:83:38:64:68:8a:65:af:e9:36:51:ef:d9:a8:5d: b7:78:86:f6:cc:6e:c4:99:a7:6d:b5:39:b0:4c:17: bb:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C9:70:BB:96:D6:89:24:65:7F:5C:F8:A3:29:0F:D7:8B:91:F5:11 X509v3 Authority Key Identifier: keyid:6E:7F:22:BE:EB:52:C6:E5:1A:24:22:B1:39:14:2E:EA:03:FB:5D:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:c7:ad:95:ae:63:61:6b:f2:03:18:ff:38:ed:60:37:58:d8: c7:e3:da:08:62:60:ac:e1:cf:ac:25:d8:61:28:83:1d:be:0d: bd:54:fb:6e:07:a0:0a:19:ab:0c:da:5c:72:ca:80:09:6b:95: 56:cd:96:21:94:a4:1b:0d:72:37:a2:2d:ba:ef:5c:f5:a7:ac: 8e:68:8b:01:fe:8e:68:08:7c:62:35:ef:ee:d3:51:c7:79:7e: 9a:4c:b7:9b:47:9a:80:c9:61:22:08:12:a3:c2:a9:3c:5a:ad: 2e:cf:ce:e3:99:b5:11:05:f8:de:2b:ef:b3:89:67:a5:01:2c: 26:8b:49:f8:38:f5:00:e3:70:e2:14:2d:cc:97:b6:fd:a0:a6: 8a:32:5d:57:2f:c9:13:ca:29:4f:14:74:2c:0e:3f:f5:c1:91: ba:a0:4e:48:d7:21:ad:1f:fd:cb:c0:de:5b:e1:0e:76:11:cc: c9:49:e7:c3:fe:8f:e5:d1:d1:e4:da:80:28:09:90:93:53:67: b6:6c:ed:dc:81:af:fc:fd:ba:32:f8:2b:d1:9b:c9:57:e5:40: 8e:af:1a:9e:79:4b:95:31:c9:3d:a2:b3:c7:bf:2d:81:51:ed: 3c:8a:3c:6f:a3:a4:2f:37:6c:a0:0f:a5:bd:39:70:30:20:be: c0:33:6e:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0lk2CxVp5f7rsUPeyDX9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlN2YyMmJlZWI1MmM2ZTUxYTI0MjJiMTM5MTQyZWVhMDNm YjVkNGQwHhcNMjUxMjA2MDQwMTI1WhcNMjUxMjA3MDQwMTI1WjAzMTEwLwYDVQQD Eyg3MmM5NzBiYjk2ZDY4OTI0NjU3ZjVjZjhhMzI5MGZkNzhiOTFmNTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZxQ/ebm+NW1OEY7TKTW+FQqcP16 QgSbTZC8JUr97W+Yn46ZFq+MA49GnCtXLyyP1W1Gkq//u3o/mIWG8n/L5soBa/ih XQbX3MC0iKEn1CbV2RFGDeiGfkeoAZWkTn3qw3M+47cqRj0J/ZlMEf7yc1MCYVsu 8JYUUP7pN+K/T6/YWtOsKy2y/W/VRuPrlhP6sghw6dfC+YF1oBNdjYU1duExP7L4 +e0BiScTeH1U0HtT1ZZJASVHpc0DT2BNEBS+U3eU4u5shfGDccRQ88exfskjjoTi jyUeHVLLG9+liKujgzhkaIplr+k2Ue/ZqF23eIb2zG7EmadttTmwTBe7FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHLJcLuW1okkZX9c+KMpD9eLkfURMB8GA1UdIwQY MBaAFG5/Ir7rUsblGiQisTkULuoD+11NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm44aXZ1dFN4dVVhSkNLeE9SUXU2Z1A3WFUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS80MmY1NGItNTdjMC00MjRhLWFjZjUt NGRkNGQwZjUzODQ5LzEvYm44aXZ1dFN4dVVhSkNLeE9SUXU2Z1A3WFUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS80MmY1NGItNTdjMC00MjRhLWFjZjUtNGRkNGQwZjUzODQ5 LzEvYm44aXZ1dFN4dVVhSkNLeE9SUXU2Z1A3WFUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAScetla5j YWvyAxj/OO1gN1jYx+PaCGJgrOHPrCXYYSiDHb4NvVT7bgegChmrDNpccsqACWuV Vs2WIZSkGw1yN6Ituu9c9aesjmiLAf6OaAh8YjXv7tNRx3l+mky3m0eagMlhIggS o8KpPFqtLs/O45m1EQX43ivvs4lnpQEsJotJ+Dj1AONw4hQtzJe2/aCmijJdVy/J E8opTxR0LA4/9cGRuqBOSNchrR/9y8DeW+EOdhHMyUnnw/6P5dHR5NqAKAmQk1Nn tmzt3IGv/P26Mvgr0ZvJV+VAjq8annlLlTHJPaKzx78tgVHtPIo8b6OkLzdsoA+l vTlwMCC+wDNuVQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:04:31 2025 by rpki-client